diff --git a/opencontrail/config.sls b/opencontrail/config.sls
index 502d2aa..68d7901 100644
--- a/opencontrail/config.sls
+++ b/opencontrail/config.sls
@@ -192,7 +192,7 @@
   {%- if grains.get('noservices') %}
   - onlyif: /bin/false
   {%- endif %}
-  - watch: 
+  - watch:
     {%- if config.version <= 3.0 %}
     - file: /etc/contrail/contrail-discovery.conf
     - file: /etc/ifmap-server/basicauthusers.properties
diff --git a/opencontrail/files/3.0/contrail-api.conf b/opencontrail/files/3.0/contrail-api.conf
index 629b1ac..ceadd64 100644
--- a/opencontrail/files/3.0/contrail-api.conf
+++ b/opencontrail/files/3.0/contrail-api.conf
@@ -23,7 +23,7 @@
 rabbit_server={{ config.message_queue.host }}
 {%- endif %}
 rabbit_port={{ config.message_queue.port }}
-{%- if config.identity.engine == "keystone" %}
+{%- if config.identity.engine == "keystone" and not config.get('k8s_enabled', False) %}
 auth=keystone
 {%- endif %}
 #rabbit_port=5673{{ config.message_queue.port }}
diff --git a/opencontrail/files/4.0/contrail-api.conf b/opencontrail/files/4.0/contrail-api.conf
index accbf49..acb2fc9 100644
--- a/opencontrail/files/4.0/contrail-api.conf
+++ b/opencontrail/files/4.0/contrail-api.conf
@@ -19,7 +19,7 @@
 rabbit_server={{ config.message_queue.host }}
 {%- endif %}
 rabbit_port={{ config.message_queue.port }}
-{%- if config.identity.engine == "keystone" %}
+{%- if config.identity.engine == "keystone" and not config.get('k8s_enabled', False) %}
 auth=keystone
 {%- endif %}
 #rabbit_port=5673